ba287b247d
add krb5_principal_set_realm
Love Hörnquist Åstrand
2008-03-24 12:06:34 +00:00
de57423148
add krb5_principal_set_realm
Love Hörnquist Åstrand
2008-03-24 12:06:30 +00:00
a86c4ec9ab
Insecure tgs referrals.
Love Hörnquist Åstrand
2008-03-24 12:06:26 +00:00
6f69a2b8f9
x
Love Hörnquist Åstrand
2008-03-24 12:06:22 +00:00
5586e24dd3
More verbose checks, disable check that no longer works with referrals.
Love Hörnquist Åstrand
2008-03-24 12:06:18 +00:00
03092c3e9a
Fix [domain_realm] section.
Love Hörnquist Åstrand
2008-03-24 12:06:12 +00:00
756ead1cd9
Find_cred to try krb5_cc_retrieve_cred first, remove comment.
Love Hörnquist Åstrand
2008-03-24 12:06:08 +00:00
1e5e118bcf
Fix error message to match function called.
Love Hörnquist Åstrand
2008-03-24 12:06:04 +00:00
92e7251a36
Refactor code to flatten the call-tree.
Love Hörnquist Åstrand
2008-03-24 12:06:00 +00:00
cd06f67cdb
x
Love Hörnquist Åstrand
2008-03-24 12:05:56 +00:00
c3d816441f
x
Love Hörnquist Åstrand
2008-03-24 12:05:52 +00:00
e5baf09800
Dont try key usage KRB5_KU_AP_REQ_AUTH for TGS-REQ. This drop compatibility with pre 0.3d KDCs.
Love Hörnquist Åstrand
2008-03-24 12:05:49 +00:00
50901132f0
Also check KDCOptions->canonicalize when looking for referrals requests.
Love Hörnquist Åstrand
2008-03-24 12:05:45 +00:00
098a497638
x
Love Hörnquist Åstrand
2008-03-24 12:05:41 +00:00
b2aff2d2bd
x
Love Hörnquist Åstrand
2008-03-24 12:05:38 +00:00
ecd4be81f0
set KRB5_GC_CANONICALIZE.
Love Hörnquist Åstrand
2008-03-24 12:05:34 +00:00
2b861313a8
set KRB5_GC_CANONICALIZE.
Love Hörnquist Åstrand
2008-03-24 12:05:30 +00:00
829360b3f6
Catch KRB5_GC_CANONICALIZE.
Love Hörnquist Åstrand
2008-03-24 12:05:26 +00:00
9a041ab3e3
x
Love Hörnquist Åstrand
2008-03-24 12:05:22 +00:00
395d4e88af
Test TGS referrals.
Love Hörnquist Åstrand
2008-03-24 12:05:18 +00:00
3fdb2ae3e3
x
Love Hörnquist Åstrand
2008-03-24 12:05:14 +00:00
23895f4fb9
Check for dup aliases before overwriting, pointed out by Johanna Mannung
Love Hörnquist Åstrand
2008-03-18 10:14:02 +00:00
3a7287955f
x
Love Hörnquist Åstrand
2008-03-16 14:30:58 +00:00
e4549b08d5
add missing symbols
Love Hörnquist Åstrand
2008-03-16 11:35:21 +00:00
784ffbfa6a
Make delegated credentials delegated directly, Oleg Sharoiko pointed out that it always didnt work with the old code. Also add som missing cred and context pass-thou functions in the SPNEGO layer
Love Hörnquist Åstrand
2008-03-16 11:33:58 +00:00
7dd314d77a
x
Love Hörnquist Åstrand
2008-03-14 21:29:51 +00:00
6541305988
Adapt to hx509_env changes.
Love Hörnquist Åstrand
2008-03-14 21:29:37 +00:00
425c28427f
add Zeqing Xia
Love Hörnquist Åstrand
2008-03-14 21:15:21 +00:00
b0d3b3e16b
x
Love Hörnquist Åstrand
2008-03-14 21:13:10 +00:00
2f58fa6ccb
Test gsskrb5_register_acceptor_identity.
Love Hörnquist Åstrand
2008-03-14 21:12:55 +00:00
df1cca124b
x
Love Hörnquist Åstrand
2008-03-14 21:11:21 +00:00
49dffae447
Add test for gsskrb5_register_acceptor_identity.
Love Hörnquist Åstrand
2008-03-14 21:10:43 +00:00
7984dfc6b7
x
Love Hörnquist Åstrand
2008-03-14 14:53:38 +00:00
00f8b507cb
rename to be more consistent, export for teting
Love Hörnquist Åstrand
2008-03-14 14:52:48 +00:00
90c30290de
Export hx509_query_match_expr.
Love Hörnquist Åstrand
2008-03-14 01:23:04 +00:00
7776ed30a9
Add language to support querying certificates to find a match. Support constructs like "1.3.6.1.5.2.3.5" IN %{certificate.eku} AND %{certificate.subject} TAILMATCH "C=SE"".
Love Hörnquist Åstrand
2008-03-13 17:35:49 +00:00
08cb59513f
Add (c).
Love Hörnquist Åstrand
2008-03-12 15:14:55 +00:00
b0a619c3aa
Add (c).
Love Hörnquist Åstrand
2008-03-12 15:14:34 +00:00
62c5f2a505
x
Love Hörnquist Åstrand
2008-03-10 15:00:28 +00:00
0968e71694
Try searchin the key by to use by first looking for for PK-INIT EKU, then the Microsoft smart card EKU and last, no special EKU at all.
Love Hörnquist Åstrand
2008-03-10 15:00:05 +00:00
1828420cc3
x
Love Hörnquist Åstrand
2008-03-09 23:58:11 +00:00
2d405842ad
(init_auth): use right variable to detect if we want to free or not.
Love Hörnquist Åstrand
2008-03-09 23:57:54 +00:00
acd0b08bcf
x
Love Hörnquist Åstrand
2008-03-09 23:41:01 +00:00
aff5c9adc4
Create a new credential cache is ->get_name is called, make acc_initialize() reset the existing credential cache if needed.
Love Hörnquist Åstrand
2008-03-09 23:39:25 +00:00
103467b5ec
x
Love Hörnquist Åstrand
2008-03-09 23:08:53 +00:00
32809668a9
(acc_get_name): just return the cache_name directly instead of trying to resolve it.
Love Hörnquist Åstrand
2008-03-09 23:08:32 +00:00
574683e7ab
x
Love Hörnquist Åstrand
2008-03-09 21:48:09 +00:00
bdd75a7ca8
Dont need to set this as the controlling PTY on steams sockets, don't abort on failure. From Harald Barth and Ian Delahorne.
Love Hörnquist Åstrand
2008-03-09 21:47:53 +00:00
351161faed
x
Love Hörnquist Åstrand
2008-02-26 17:01:08 +00:00
2800e5d81a
Add more built files so they are distributed.
Love Hörnquist Åstrand
2008-02-26 17:00:25 +00:00
d635542a92
add hx509_pem_read
Love Hörnquist Åstrand
2008-02-26 16:19:36 +00:00
fe254dd716
x
Love Hörnquist Åstrand
2008-02-26 15:10:18 +00:00
c130ec0a6a
add missing \
Love Hörnquist Åstrand
2008-02-26 15:09:34 +00:00
bafd4055b8
Don't test the chmod 0'ed keytab, since that test doesn't work for root
Love Hörnquist Åstrand
2008-02-26 13:19:52 +00:00
84b1e01eea
add missing (c)
Love Hörnquist Åstrand
2008-02-26 13:13:07 +00:00
d9e70f4359
x
Love Hörnquist Åstrand
2008-02-26 12:54:59 +00:00
82ece7c43d
reshuffle depenencies
Love Hörnquist Åstrand
2008-02-26 12:51:46 +00:00
27a3ca100e
Add flag to not add gss-api INT|CONF to the negotiation
Love Hörnquist Åstrand
2008-02-26 12:40:35 +00:00
c4e1402fd8
x
Love Hörnquist Åstrand
2008-02-26 12:29:57 +00:00
8348b37a6b
Add --pem to cms-verify-sd.
Love Hörnquist Åstrand
2008-02-26 12:29:39 +00:00
6ace7f4af6
Test verifying PEM signature files.
Love Hörnquist Åstrand
2008-02-26 12:28:52 +00:00
35a3b73c9c
Support verifying PEM signature files.
Love Hörnquist Åstrand
2008-02-26 12:28:23 +00:00
8eaef94597
x
Love Hörnquist Åstrand
2008-02-25 07:40:34 +00:00
faa8fc7e88
libhx509_la_OBJECTS depends on hx_locl.h
Love Hörnquist Åstrand
2008-02-25 07:40:05 +00:00
1873035d27
Use unsigned char as argument to ctype function, from Michael ven Elst.
Love Hörnquist Åstrand
2008-02-25 07:37:57 +00:00
0f10735602
Use unsigned char as argument to isspace(), from Michael ven Elst.
Love Hörnquist Åstrand
2008-02-25 07:35:44 +00:00
45b392682d
Use unsigned char as argument to isspace(), from Michael ven Elst.
Love Hörnquist Åstrand
2008-02-25 07:35:04 +00:00
55da941b89
Clean symlinks and built-files.
Love Hörnquist Åstrand
2008-02-24 21:53:03 +00:00
bfb75d5e9e
Make all apps depend on libroken.
Love Hörnquist Åstrand
2008-02-24 10:53:49 +00:00
6ec94c7e5d
add version-script.map
Love Hörnquist Åstrand
2008-02-24 10:37:21 +00:00
03d304492b
add wind_ucs2read.
Love Hörnquist Åstrand
2008-02-24 10:13:29 +00:00
806b49d6e8
x
Love Hörnquist Åstrand
2008-02-24 09:28:18 +00:00
916d9a67f6
Add LIB_com_err.
Love Hörnquist Åstrand
2008-02-24 09:25:52 +00:00
10e990800c
x
Love Hörnquist Åstrand
2008-02-23 19:59:46 +00:00
7a7e82c7de
x
Love Hörnquist Åstrand
2008-02-23 19:59:28 +00:00
4f74d0bc58
Add more built files.
Love Hörnquist Åstrand
2008-02-23 19:59:06 +00:00
6b4676ac99
(CLEANFILES): add wind.h and wind_err.h and sort.
Love Hörnquist Åstrand
2008-02-23 19:57:50 +00:00
97a9211d0b
Strip of xn-- that puny-code adds.
Love Hörnquist Åstrand
2008-02-23 19:11:18 +00:00
c9e0f171f6
x
Love Hörnquist Åstrand
2008-02-23 15:24:55 +00:00
72af89aadf
x
Love Hörnquist Åstrand
2008-02-23 15:04:07 +00:00
d1404acc69
Handle c-comments.
Love Hörnquist Åstrand
2008-02-23 15:03:48 +00:00
6dc76f4f6f
x
Love Hörnquist Åstrand
2008-02-23 15:03:24 +00:00
77f0d548bf
make AM_CPPFLAGS +=
Love Hörnquist Åstrand
2008-02-23 15:03:11 +00:00
3efa1c9caf
Make DEFAULT_INCLUDES work better, avoid picking up the wrong headerfiles. $(top_builddir)/include vs ${builddir}.
Love Hörnquist Åstrand
2008-02-23 15:02:39 +00:00
ff89fa19b2
x
Love Hörnquist Åstrand
2008-02-23 11:03:09 +00:00
b8a771bf3b
Make this pass the test cases again.
Love Hörnquist Åstrand
2008-02-23 10:58:43 +00:00